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1 . (currently amended) A method for multiplying an elliptic curve point Q(x,y) by a scalar 
to provide a point kQ, the method comprising the steps of: 

a) selecting an elliptic curve of order n over a finite field F such that there exists an 
endomorphism y/ where y/ (Q) = X (Q) for all point Q (x,y) on the elliptic curve, and X is an 
integer, 

b) establishing a representation of said scalar k as a combination of components kj and said 
integer X of the form k s = k t X mod n. 

i=0 



c) combining said representation and said point Q to form a composite representation of a 
multiple of the form koQ + k, y/ (Q) +. . . corresponding to kQ ; and 

d) computing a value corresponding to said point kQ from said composite representation of kQ. 

2. (original) A method according to claim 1 wherein each of said components kj is shorter 
than said scalar k. 

3. (original) A method according to claim 1 wherein said components kj are initially 
selected and subsequently combined to provide said scalar k. 

4. (currently amended) A method according to claim 1 wherein said components k i are 

/= 

selected at random, [representation is of the form = ^^A 1 _mod n where n is the number of 
points on the elliptic curve]. 

5. (currently amended) A method according to claim 4 wherein said representation is of the 
form ko +ki X . 

6. (currently amended) A method according to claim 1 wherein said scalar k has a 
predetermined value and said components kn and k i ^ are one half size of said scalar k. 
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7. (original) A method according to claim 3 wherein said value of said multiple kQ is 
calculated using simultaneous multiple addition. 

8. (original) A method according to claim 7 wherein grouped terms Gi utilized in said 
simultaneous multiple addition are precomputed. 

9. (original) A method according to claim 6 wherein said components ki are obtained by 
obtaining short basis vectors (uo, Uj) of the field F, designating a vector v as (k,0), converting v 
from a standard, orthonomal basis to the (u<>, Uj) basis, to obtain fractions f<fi representative of the 
vector v, applying said fractions to k to obtain a vector z, calculating an efficient equivalent v' in 
the composite representation of kQ. 

10. (currently amended) A method of generating in an elliptic curve cryptosystem a key pair 
having a integer k providing a private key and a public key kQ, where Q is a point on the curve, 

a) selecting an elliptic curve over a finite filed F such that there exists an endomorphism y/ 
. where y/ (Q) = X Q for all points Q (x,y) on the elliptic curve, X is an integer, 

b) establishing a representation of said key k as a combination of components kj and said integer 

X , of the form k % = V k- t X mod n where n is the number of points on the elliptic curve, 

c) combining said representation and said point Q to form a composite representation of a 
multiple of the form knO + k, y/ (O) +... corresponding to the public key kQ ; and 

d) computing a value corresponding to said public kQ from said composite representation of kQ. 

1 1 . (currently amended) A method according to claim 10 [including a method according to 
any one of claims 2 to 9] wherein each of said components ki is shorter than said scalar k . 

12. (new) A method according to claim 1 1 wherein said components kj are initially selected 
and subsequently combined to provide said scalar k. 

13. (new) A method according to claim 12 said components ki are selected at random. 
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14. (new) A method according to claim 13 wherein said representation is of the form ko 
+k t A. 

15. (new) A method according to claim 10 wherein said scalar k has a predetermined value 
and said components ko and k\ are selected to be one half the size of said scalar k. 

16. (new) A method according to claim 12 wherein said value of said multiple kQ is 
calculated using simultaneous multiple addition. 

17. (new) A method according to claim 16 wherein grouped terms Gi utilized in said 
simultaneous multiple addition are precomputed. 

1 8. (new) A method according to claim 1 5 wherein said components k x are obtained by 
obtaining short basis vectors (uo, Uj) of the field F, designating a vector v as (k,0), converting v 
from a standard, orthonomal basis to the (Uo> Uj) basis, to obtain fractions f<fi representative of the 
vector v, applying said fractions to k to obtain a vector z, calculating an efficient equivalent v % in 
the composite representation of kQ. 
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